[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOSLCcEja7Z23RfiukPmMduYHVO2MkE6uAwlM3poOTfI":3,"g5a-ex:sap\u002Fnetweaver_abap@*":327,"g5a-family:sap\u002Fnetweaver_abap":329},{"success":4,"data":5},true,{"product":6,"versions":169,"topVulnerabilitiesByEpss":243,"kevVulnerabilities":304,"seoMetadata":305,"meta":324},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":168},"sap","netweaver_abap",73,21,0,"2024-08-13",[14,18,21,23,25,28,30,32,35,37,39,41,43,45,47,49,51,53,55,57,60,62,64,66,68,70,72,74,76,78,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,164,166],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.0",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"700",6,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"701",{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},"7.02",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"702",7,{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"7.03",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"7.10",{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},"710",2,{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"7.11",{"version":38,"cve_count":34,"kev_count":11,"has_kev":17},"711",{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},"7.21",{"version":42,"cve_count":16,"kev_count":11,"has_kev":17},"7.21ext",{"version":44,"cve_count":34,"kev_count":11,"has_kev":17},"7.22",{"version":46,"cve_count":34,"kev_count":11,"has_kev":17},"7.22ext",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"7.30",{"version":50,"cve_count":20,"kev_count":11,"has_kev":17},"730",{"version":52,"cve_count":16,"kev_count":11,"has_kev":17},"7.31",{"version":54,"cve_count":27,"kev_count":11,"has_kev":17},"731",{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},"7.40",{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},"740",9,{"version":61,"cve_count":34,"kev_count":11,"has_kev":17},"7.49",{"version":63,"cve_count":11,"kev_count":11,"has_kev":17},"7.50",{"version":65,"cve_count":59,"kev_count":11,"has_kev":17},"750",{"version":67,"cve_count":27,"kev_count":11,"has_kev":17},"751",{"version":69,"cve_count":27,"kev_count":11,"has_kev":17},"752",{"version":71,"cve_count":34,"kev_count":11,"has_kev":17},"7.53",{"version":73,"cve_count":27,"kev_count":11,"has_kev":17},"753",{"version":75,"cve_count":27,"kev_count":11,"has_kev":17},"754",{"version":77,"cve_count":27,"kev_count":11,"has_kev":17},"755",{"version":79,"cve_count":80,"kev_count":11,"has_kev":17},"756",5,{"version":82,"cve_count":11,"kev_count":11,"has_kev":17},"7.74",{"version":84,"cve_count":11,"kev_count":11,"has_kev":17},"7.75",{"version":86,"cve_count":34,"kev_count":11,"has_kev":17},"7.77",{"version":88,"cve_count":34,"kev_count":11,"has_kev":17},"7.81",{"version":90,"cve_count":11,"kev_count":11,"has_kev":17},"7.84",{"version":92,"cve_count":16,"kev_count":11,"has_kev":17},"784",{"version":94,"cve_count":16,"kev_count":11,"has_kev":17},"7.85",{"version":96,"cve_count":16,"kev_count":11,"has_kev":17},"785",{"version":98,"cve_count":16,"kev_count":11,"has_kev":17},"7.86",{"version":100,"cve_count":16,"kev_count":11,"has_kev":17},"786",{"version":102,"cve_count":16,"kev_count":11,"has_kev":17},"7.87",{"version":104,"cve_count":16,"kev_count":11,"has_kev":17},"787",{"version":106,"cve_count":16,"kev_count":11,"has_kev":17},"8.04",{"version":108,"cve_count":34,"kev_count":11,"has_kev":17},"804",{"version":110,"cve_count":20,"kev_count":11,"has_kev":17},"kernel_7.22",{"version":112,"cve_count":80,"kev_count":11,"has_kev":17},"kernel_7.49",{"version":114,"cve_count":20,"kev_count":11,"has_kev":17},"kernel_7.53",{"version":116,"cve_count":16,"kev_count":11,"has_kev":17},"kernel_7.54",{"version":118,"cve_count":119,"kev_count":11,"has_kev":17},"kernel_7.73",3,{"version":121,"cve_count":119,"kev_count":11,"has_kev":17},"kernel_7.77",{"version":123,"cve_count":34,"kev_count":11,"has_kev":17},"kernel_7.81",{"version":125,"cve_count":119,"kev_count":11,"has_kev":17},"kernel_7.85",{"version":127,"cve_count":34,"kev_count":11,"has_kev":17},"kernel_7.86",{"version":129,"cve_count":34,"kev_count":11,"has_kev":17},"kernel_7.87",{"version":131,"cve_count":34,"kev_count":11,"has_kev":17},"kernel_7.88",{"version":133,"cve_count":16,"kev_count":11,"has_kev":17},"kernel_7.89",{"version":135,"cve_count":16,"kev_count":11,"has_kev":17},"kernel_7.93",{"version":137,"cve_count":80,"kev_count":11,"has_kev":17},"kernel_8.04",{"version":139,"cve_count":16,"kev_count":11,"has_kev":17},"krnl32nuc_7.21",{"version":141,"cve_count":119,"kev_count":11,"has_kev":17},"krnl32nuc_7.22",{"version":143,"cve_count":119,"kev_count":11,"has_kev":17},"krnl32nuc_7.22ext",{"version":145,"cve_count":16,"kev_count":11,"has_kev":17},"krnl32uc_7.21",{"version":147,"cve_count":16,"kev_count":11,"has_kev":17},"krnl64nuc_7.21",{"version":149,"cve_count":27,"kev_count":11,"has_kev":17},"krnl64nuc_7.22",{"version":151,"cve_count":20,"kev_count":11,"has_kev":17},"krnl64nuc_7.22ext",{"version":153,"cve_count":119,"kev_count":11,"has_kev":17},"krnl64nuc_7.49",{"version":155,"cve_count":16,"kev_count":11,"has_kev":17},"krnl64nuc_8.04",{"version":157,"cve_count":20,"kev_count":11,"has_kev":17},"krnl64uc_7.22",{"version":159,"cve_count":20,"kev_count":11,"has_kev":17},"krnl64uc_7.22ext",{"version":161,"cve_count":80,"kev_count":11,"has_kev":17},"krnl64uc_7.49",{"version":163,"cve_count":20,"kev_count":11,"has_kev":17},"krnl64uc_7.53",{"version":165,"cve_count":119,"kev_count":11,"has_kev":17},"krnl64uc_7.73",{"version":167,"cve_count":80,"kev_count":11,"has_kev":17},"krnl64uc_8.04","Netweaver Abap by Sap is a technology product with 73 tracked versions and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":34,"kev_count":11,"has_kev":17},{"version":40,"cve_count":16,"kev_count":11,"has_kev":17},{"version":42,"cve_count":16,"kev_count":11,"has_kev":17},{"version":44,"cve_count":34,"kev_count":11,"has_kev":17},{"version":46,"cve_count":34,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":20,"kev_count":11,"has_kev":17},{"version":52,"cve_count":16,"kev_count":11,"has_kev":17},{"version":54,"cve_count":27,"kev_count":11,"has_kev":17},{"version":56,"cve_count":16,"kev_count":11,"has_kev":17},{"version":58,"cve_count":59,"kev_count":11,"has_kev":17},{"version":61,"cve_count":34,"kev_count":11,"has_kev":17},{"version":63,"cve_count":11,"kev_count":11,"has_kev":17},{"version":65,"cve_count":59,"kev_count":11,"has_kev":17},{"version":67,"cve_count":27,"kev_count":11,"has_kev":17},{"version":69,"cve_count":27,"kev_count":11,"has_kev":17},{"version":71,"cve_count":34,"kev_count":11,"has_kev":17},{"version":73,"cve_count":27,"kev_count":11,"has_kev":17},{"version":75,"cve_count":27,"kev_count":11,"has_kev":17},{"version":77,"cve_count":27,"kev_count":11,"has_kev":17},{"version":79,"cve_count":80,"kev_count":11,"has_kev":17},{"version":82,"cve_count":11,"kev_count":11,"has_kev":17},{"version":84,"cve_count":11,"kev_count":11,"has_kev":17},{"version":86,"cve_count":34,"kev_count":11,"has_kev":17},{"version":88,"cve_count":34,"kev_count":11,"has_kev":17},{"version":90,"cve_count":11,"kev_count":11,"has_kev":17},{"version":92,"cve_count":16,"kev_count":11,"has_kev":17},{"version":94,"cve_count":16,"kev_count":11,"has_kev":17},{"version":96,"cve_count":16,"kev_count":11,"has_kev":17},{"version":98,"cve_count":16,"kev_count":11,"has_kev":17},{"version":100,"cve_count":16,"kev_count":11,"has_kev":17},{"version":102,"cve_count":16,"kev_count":11,"has_kev":17},{"version":104,"cve_count":16,"kev_count":11,"has_kev":17},{"version":106,"cve_count":16,"kev_count":11,"has_kev":17},{"version":108,"cve_count":34,"kev_count":11,"has_kev":17},{"version":110,"cve_count":20,"kev_count":11,"has_kev":17},{"version":112,"cve_count":80,"kev_count":11,"has_kev":17},{"version":114,"cve_count":20,"kev_count":11,"has_kev":17},{"version":116,"cve_count":16,"kev_count":11,"has_kev":17},{"version":118,"cve_count":119,"kev_count":11,"has_kev":17},{"version":121,"cve_count":119,"kev_count":11,"has_kev":17},{"version":123,"cve_count":34,"kev_count":11,"has_kev":17},{"version":125,"cve_count":119,"kev_count":11,"has_kev":17},{"version":127,"cve_count":34,"kev_count":11,"has_kev":17},{"version":129,"cve_count":34,"kev_count":11,"has_kev":17},{"version":131,"cve_count":34,"kev_count":11,"has_kev":17},{"version":133,"cve_count":16,"kev_count":11,"has_kev":17},{"version":135,"cve_count":16,"kev_count":11,"has_kev":17},{"version":137,"cve_count":80,"kev_count":11,"has_kev":17},{"version":139,"cve_count":16,"kev_count":11,"has_kev":17},{"version":141,"cve_count":119,"kev_count":11,"has_kev":17},{"version":143,"cve_count":119,"kev_count":11,"has_kev":17},{"version":145,"cve_count":16,"kev_count":11,"has_kev":17},{"version":147,"cve_count":16,"kev_count":11,"has_kev":17},{"version":149,"cve_count":27,"kev_count":11,"has_kev":17},{"version":151,"cve_count":20,"kev_count":11,"has_kev":17},{"version":153,"cve_count":119,"kev_count":11,"has_kev":17},{"version":155,"cve_count":16,"kev_count":11,"has_kev":17},{"version":157,"cve_count":20,"kev_count":11,"has_kev":17},{"version":159,"cve_count":20,"kev_count":11,"has_kev":17},{"version":161,"cve_count":80,"kev_count":11,"has_kev":17},{"version":163,"cve_count":20,"kev_count":11,"has_kev":17},{"version":165,"cve_count":119,"kev_count":11,"has_kev":17},{"version":167,"cve_count":80,"kev_count":11,"has_kev":17},[244,252,260,266,272,279,282,287,292,298],{"cveId":245,"description":246,"publishedDate":247,"cvssScore":248,"cvssVersion":249,"severity":250,"isKev":17,"epssScore":251},"CVE-2012-4341","Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a (1) long parameter value, (2) crafted string size field, or (3) long Parameter Name string in a package with opcode 0x43 and sub opcode 0x4 to TCP port 3900.","2012-08-15",10,"v2","Critical",0.08471,{"cveId":253,"description":254,"publishedDate":255,"cvssScore":256,"cvssVersion":257,"severity":258,"isKev":17,"epssScore":259},"CVE-2017-9843","SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vectors involving disp+work.exe, aka SAP Security Note 2406841.","2017-07-12",2.7,"v3.1","Low",0.02255,{"cveId":261,"description":262,"publishedDate":263,"cvssScore":80,"cvssVersion":249,"severity":264,"isKev":17,"epssScore":265},"CVE-2015-1309","XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access arbitrary files via a crafted XML request, related to ECATT_DISPLAY_XMLSTRING_REMOTE, aka SAP Note 2016638.","2015-01-22","Medium",0.02228,{"cveId":267,"description":268,"publishedDate":269,"cvssScore":270,"cvssVersion":249,"severity":258,"isKev":17,"epssScore":271},"CVE-2014-8312","Business Warehouse (BW) in SAP Netweaver AS ABAP 7.31 allows remote authenticated users to obtain sensitive information via a request to the RSDU_CCMS_GET_PROFILE_PARAM RFC function.","2014-10-16",3.5,0.02103,{"cveId":273,"description":274,"publishedDate":275,"cvssScore":276,"cvssVersion":257,"severity":277,"isKev":17,"epssScore":278},"CVE-2021-27597","SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network which will trigger an internal error in the system due to improper input validation in method memmove() causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.","2021-06-09",7.5,"High",0.01508,{"cveId":280,"description":281,"publishedDate":275,"cvssScore":276,"cvssVersion":257,"severity":277,"isKev":17,"epssScore":278},"CVE-2021-27633","SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network which will trigger an internal error in the system due to improper input validation in method ThCPIC() causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.",{"cveId":283,"description":284,"publishedDate":285,"cvssScore":276,"cvssVersion":257,"severity":277,"isKev":17,"epssScore":286},"CVE-2022-22543","SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) - versions KERNEL 7.22, 8.04, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, KRNL64UC 8.04, 7.22, 7.22EXT, 7.49, 7.53, KRNL64NUC 7.22, 7.22EXT, 7.49, does not sufficiently validate sap-passport information, which could lead to a Denial-of-Service attack. This allows an unauthorized remote user to provoke a breakdown of the SAP Web Dispatcher or Kernel work process. The crashed process can be restarted immediately, other processes are not affected.","2022-02-09",0.01361,{"cveId":288,"description":289,"publishedDate":275,"cvssScore":290,"cvssVersion":257,"severity":264,"isKev":17,"epssScore":291},"CVE-2021-27634","SAP NetWeaver AS for ABAP (RFC Gateway), versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network which will trigger an internal error in the system due to improper input validation in method ThCpicDtCreate () causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.",5.9,0.01325,{"cveId":293,"description":294,"publishedDate":295,"cvssScore":296,"cvssVersion":257,"severity":250,"isKev":17,"epssScore":297},"CVE-2021-27610","SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by malicious users to obtain illegitimate access to the system.","2021-06-16",9.8,0.0132,{"cveId":299,"description":300,"publishedDate":301,"cvssScore":302,"cvssVersion":257,"severity":277,"isKev":17,"epssScore":303},"CVE-2021-38178","The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.","2021-10-12",8.8,0.01294,[],{"title":306,"metaDescription":307,"keywords":308,"structuredData":309},"Netweaver Abap by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Netweaver Abap by Sap covering 73 versions with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Netweaver Abap vulnerabilities, Netweaver Abap security, Netweaver Abap CVE, Sap Netweaver Abap, Netweaver Abap threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":310,"@type":311,"name":312,"description":307,"url":313,"manufacturer":314,"applicationCategory":318,"softwareVersion":319,"mainEntity":320},"https:\u002F\u002Fschema.org","SoftwareApplication","Netweaver Abap","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fnetweaver_abap",{"@type":315,"name":316,"url":317},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","73 versions tracked",{"@type":321,"name":322,"description":323,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Netweaver Abap Security Vulnerabilities","Security vulnerabilities affecting Netweaver Abap by Sap",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":325,"apiVersion":326},"2026-10-18T21:12:30.839Z","3.0",{"rows":328,"total":11,"capped":17,"failed":11},[],[330],{"product":331,"cves":332},"netweaver_abap_application_server",4]